Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/42e82b31-39fd-31a5-bbdc-9c71adc40bd8.roa
File:                     42e82b31-39fd-31a5-bbdc-9c71adc40bd8.roa (raw, json)
Hash identifier:          y6DKOlJHDEYj2SjjabmotvJMbYEdH++QFE/FJzDhzGo=
Subject key identifier:   14:09:53:09:BB:BE:AA:5E:27:8C:C3:89:75:9E:60:5D:91:CF:D0:8F
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F1C2B7427F64A4515D733B880
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/42e82b31-39fd-31a5-bbdc-9c71adc40bd8.roa
Signing time:             Thu 01 Sep 2022 13:42:07 +0000
ROA not before:           Thu 01 Sep 2022 13:42:07 +0000
ROA not after:            Fri 07 Oct 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        182.28.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:1c:2b:74:27:f6:4a:45:15:d7:33:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep  1 13:42:07 2022 GMT
            Not After : Oct  7 04:00:00 2022 GMT
        Subject: CN=c28958a9-5075-4745-bf12-c248b3042c1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:9c:32:81:0d:e5:cf:8f:ad:7f:65:bc:ac:d1:
                    16:33:49:59:39:ed:4f:09:3a:bf:4f:03:cb:56:0b:
                    10:9a:5e:bc:9c:16:4d:38:b0:37:54:91:5b:7f:80:
                    ab:7d:e3:be:fc:fe:91:6d:05:5c:1a:da:d0:b5:29:
                    3a:57:58:09:26:93:bb:84:fd:85:0d:b9:ec:76:9d:
                    72:e7:9a:d5:57:97:06:99:53:dd:ee:0c:aa:a6:6f:
                    47:58:96:b4:30:55:90:3c:b3:75:f8:38:98:5d:c9:
                    25:20:11:4e:bf:73:52:54:21:24:70:40:6c:6a:b2:
                    75:8d:fa:5b:2a:9b:e6:51:ea:db:9c:1a:a6:63:42:
                    28:aa:e5:8d:54:5d:25:57:77:4f:0a:44:ad:c9:85:
                    18:01:32:3c:3c:f9:52:de:50:10:80:23:01:de:d0:
                    19:b9:2b:61:64:3e:d6:fa:27:68:24:57:f4:0f:13:
                    6a:a8:14:f1:73:78:40:b8:78:2f:bd:f9:07:dc:a4:
                    77:c8:2a:20:14:bd:8f:2a:ac:0e:5b:f8:95:d4:6a:
                    95:22:f1:5b:ec:dd:68:ba:e1:a9:6e:7b:f8:37:45:
                    81:4b:83:59:83:a1:d6:ef:30:e1:67:cc:1b:d0:a3:
                    7e:cc:61:18:81:1c:e2:5b:55:b0:44:f3:03:65:9e:
                    29:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:09:53:09:BB:BE:AA:5E:27:8C:C3:89:75:9E:60:5D:91:CF:D0:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/42e82b31-39fd-31a5-bbdc-9c71adc40bd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.28.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:f0:82:5d:5c:8a:34:ba:59:68:fc:61:98:2f:d5:25:a9:4e:
         07:1a:cc:2a:97:0a:4c:e3:d6:ba:b2:52:0f:a0:16:23:35:a3:
         87:ed:9e:69:46:c1:39:cc:65:ff:fa:57:13:5e:00:07:1f:e3:
         25:77:82:cd:86:8d:c5:08:13:b3:03:85:77:c5:ff:40:4e:d7:
         9f:ca:dc:a6:8b:14:79:f7:55:7a:4b:fe:f5:8f:1b:2e:42:68:
         2d:f6:db:38:47:77:8d:b6:7c:27:c7:8d:bf:bb:69:1e:f0:23:
         9f:b5:20:63:2f:67:6e:75:8d:05:33:ae:29:7a:eb:8c:ce:5c:
         cf:ab:88:a3:c2:39:1d:01:e4:73:79:62:4a:c2:e6:39:5e:e0:
         0b:69:69:62:d2:cb:47:ab:0f:ad:83:34:e6:02:b2:e2:de:49:
         df:a3:47:79:ea:1d:9c:24:0a:3a:3f:06:be:bb:58:e6:87:46:
         b7:65:5e:7e:e1:cf:42:93:5f:57:08:cb:09:76:da:26:38:2a:
         2d:4b:4e:44:12:de:e3:c4:9f:cf:fb:02:22:86:8d:52:e1:f1:
         86:42:cd:f4:75:cc:15:15:22:4a:66:9c:41:e2:a1:e0:53:44:
         3a:4b:06:86:f7:1b:d3:25:37:21:64:be:4c:25:8a:af:39:8a:
         10:c0:ea:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:54:06 2025 by rpki-client